Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
File:                     LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json)
Hash identifier:          FgzDTAZg7UXy9V84nTaymhIQN8/MO/lxA9eVWIfUue8=
Subject key identifier:   22:F7:CB:F6:D1:A5:0A:E8:90:E0:E4:95:9E:E2:97:D0:F6:64:E4:37
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Certificate issuer:       /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial:       019849D322C6BE58ED0CCD78C0C04B516971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 03:00:30 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:30 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:30 +0000
Files and hashes:         1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=)
                          2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: Zsop04GI/JlS5Kg/2rkcrZ2eSG0mW5PCvIrvPb8yODk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:22:c6:be:58:ed:0c:cd:78:c0:c0:4b:51:69:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
        Validity
            Not Before: Jul 27 03:00:30 2025 GMT
            Not After : Jul 28 03:00:30 2025 GMT
        Subject: CN=22f7cbf6d1a50ae890e0e4959ee297d0f664e437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:5f:1a:f8:95:15:1d:fc:01:ed:11:3f:3f:
                    2c:01:53:fa:a5:86:b8:b0:10:01:04:62:32:7b:27:
                    27:0a:36:64:89:97:22:26:18:4e:91:b8:46:64:7e:
                    6e:48:84:d2:25:1d:0f:6e:66:de:c9:61:0e:1d:ee:
                    fe:98:36:ea:63:f3:8e:97:aa:92:63:17:26:4a:47:
                    4e:1c:85:cd:9b:27:bb:94:e4:20:a8:aa:87:58:c7:
                    6b:f0:42:16:32:05:67:19:ef:d9:dd:52:80:76:8a:
                    fc:e2:51:5a:b0:0d:ba:e0:5f:39:03:06:82:f2:6f:
                    f8:32:13:db:76:a2:e9:8d:13:54:d1:04:7d:c1:b8:
                    49:42:15:c8:bb:08:ea:48:66:95:d4:a7:a3:fc:dd:
                    6c:8f:88:17:d7:f0:c6:88:8a:9b:a9:05:5d:dc:26:
                    cd:ff:f1:50:ed:77:78:a9:7d:ee:93:89:30:17:d2:
                    48:8a:a5:45:be:4f:0b:d1:ca:76:01:08:e3:0f:7e:
                    db:f4:90:5e:92:e3:f8:7a:b9:bc:6a:39:16:c0:fa:
                    12:c1:18:9f:18:34:d6:cf:71:d9:15:cb:8f:db:92:
                    a1:c6:9f:b9:18:30:29:27:c8:de:81:7c:43:5d:96:
                    56:87:8a:76:0f:e2:ed:5f:95:74:20:ce:f4:af:fd:
                    41:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F7:CB:F6:D1:A5:0A:E8:90:E0:E4:95:9E:E2:97:D0:F6:64:E4:37
            X509v3 Authority Key Identifier:
                keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:39:9a:fe:ab:ea:6d:74:5b:37:a0:b0:18:ba:9b:e8:b3:71:
         ea:ed:50:db:17:23:74:51:4c:09:02:a0:4b:5c:95:74:05:f0:
         e1:0c:28:e7:cb:9f:25:6a:41:51:5d:64:b7:56:f0:a3:46:7b:
         d5:a0:f6:8f:1a:44:bf:8e:75:7e:76:1f:93:35:2f:9e:6b:70:
         b4:02:4f:9d:fa:55:2e:c9:7a:de:4c:8c:94:23:42:ae:85:f4:
         8f:8b:63:0d:a2:0d:43:66:ac:73:2e:c7:eb:36:c9:d9:52:0d:
         04:b2:c8:c1:63:3e:39:36:61:00:d7:9d:7b:8f:ca:d5:f7:dd:
         54:ab:4c:e6:1a:6c:00:64:aa:6f:d8:ce:ad:e6:66:55:90:e8:
         56:2a:a0:54:6a:e5:58:42:63:75:e5:37:2c:30:87:65:b2:31:
         34:00:1e:c2:d7:6d:cc:a7:69:c5:dc:b4:82:66:5c:5e:c0:65:
         ed:f4:15:6f:21:ac:00:fe:da:24:d2:fa:ff:a8:a0:82:76:99:
         11:89:34:87:4e:28:06:cb:3b:29:25:31:ed:17:e6:8b:bc:dc:
         86:1c:f3:cd:c5:ee:31:e6:0b:70:06:bd:f8:93:0a:37:c3:22:
         c9:ad:d1:66:e0:2b:2a:78:f2:56:41:32:9f:57:9d:9c:71:41:
         c8:a9:b2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:20 2025 by rpki-client